Paul Grosen

The issue is related to improper Finite State Machines (FSMs) in the hardware logic of some Intel(R) Processors. This may allow a privileged user to potentially enable denial of service via local access.

A protection mechanism failure in the SPP for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

A protection mechanism failure in the SPP for some Intel(R) Xeon(R) processor family (E-Core) may allow an authenticated user to potentially enable escalation of privilege via local access. This issue could let an authenticated user increase their privileges through local access.

Name of the Vulnerable Software and Affected Versions: Intel(R) Processors (affected versions not specified) Description: The issue is related to improper isolation in the stream cache mechanism of some Intel(R) Processors, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could be exploited by an attacker to gain elevated privileges. The vulnerability is associated with the incorrect isolation of shared resources between trusted and untrusted agents in the processor's microcode. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to improper isolation in the stream cache mechanism, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to the incorrect isolation of shared resources between trusted and untrusted agents.

A sequence of processor instructions can lead to unexpected behavior in some Intel processors, potentially allowing an authenticated user to enable escalation of privilege, information disclosure, or denial of service via local access. This issue is related to the interpretation of redundant prefixes and can cause the system to crash or become unresponsive. The vulnerability, termed Reptar, primarily affects multi-tenant virtualized environments where multiple virtual machines are run on the same host.

The issue allows an attacker who gains authentication to run a debug command, which is sent to the reader, causing a heap overflow in the MCL Smart Reader stack. This heap overflow enables the attacker to remotely execute code on the MCL Smart Reader, potentially leading to control of the device.